PKI Governance and Configuration Manager
About The Position
We are seeking a highly skilled Senior PKI Governance & Configuration Manager to oversee the integrity, security, and compliance of Department of State’s mission-critical Public Key Infrastructure (PKI) and Credential hosting systems. This role is a hybrid of technical configuration management and high-level cybersecurity governance. You will be the primary architect of compliance, ensuring that all systems across Unclassified, Classified, and SaaS environments maintain their Authority to Operate (ATO). You will bridge the gap between technical PKI operations, engineering and federal regulatory requirements, specifically focusing on NIST SP 800-53, FedRAMP frameworks, and other applicable Federal standards.
Requirements
- Meticulous: You have an eye for detail, ensuring that a single misconfigured control doesn't compromise an entire assessment.
- Strategist: You can translate complex federal mandates into actionable technical requirements for engineering teams.
- Communicator: You are comfortable briefing Authorizing Officials (AOs) and stakeholders on risk posture and compliance gaps.
Responsibilities
- Direct the governance lifecycle for multiple PKI systems and Credential Hosting environments.
- Enforce adherence to Certificate Policy (CP) and Certification Practice Statements (CPS).
- Lead the development and implementation of PKI-related policies across diverse network fabrics.
- Serve as the Lead for all NIST SP 800-53 security compliance assessments.
- Author, review, and maintain a comprehensive library of security artifacts (SSP, SAR, POA&M, etc.).
- Manage the end-to-end FedRAMP certification process for SaaS offerings.
- Ensure continuous monitoring and timely remediation to maintain ATO status for all systems.
- Establish and manage strict Configuration Management (CM) baselines for PKI hardware and software.
- Lead the Change Advisory Board (CAB) for identity services, evaluating the security impact of all system modifications.
- Maintain rigorous documentation of system architectures and configuration settings.
- Synchronize security postures across Unclassified (NIPR), Classified (SIPR), and Cloud/SaaS environments.
- Coordinate with cross-functional teams to ensure seamless identity management and credential interoperability.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
